PT-2018-10579 · Siemens · Scalance M875

Publicado 2018-06-26 · Atualizado 2019-10-09 · CVE-2018-11449

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions SCALANCE M875 (All versions)

Description A security issue has been identified that could allow an attacker with local file system access to obtain passwords for administrative users. To exploit this, an attacker must have read access to files on the local file system. If successful, the attack could result in the attacker obtaining administrative passwords.

Recommendations For SCALANCE M875, restrict access to the local file system to minimize the risk of exploitation. Ensure that only authorized personnel have read access to sensitive files. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-11449

Produtos afetados

Scalance M875

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2018-11449 · Nota de Segurança
• https://cert-portal.siemens.com/productcert/pdf/ssa-977428.pdf · Nota